From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Wed, 15 Jul 2026 13:06:23 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-ot1-f64.google.com (mail-ot1-f64.google.com [209.85.210.64]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 66FB6KXq022962 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 15 Jul 2026 13:06:21 +0200 Received: by mail-ot1-f64.google.com with SMTP id 46e09a7af769-7e9f6f0240esf2912001a34.3 for ; Wed, 15 Jul 2026 04:06:21 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1784113574; cv=pass; d=google.com; s=arc-20260327; b=nMirVmvFiE88VcVawO6NHALbCgKC8BR3j24g0WAYvX0EDGTA5F7UlWTGiUHrVWCZVP r4JjTJ4kmDemhCuES9k9zRUFb7tiB6KVDwcLxJKuEKnBlm3u/+ed1JuQ5b0uW1Ff+g+g 6T7cvPqsLx4uvLAaYD0vU79BAyP0AYh/TtDCZ4UJNIvaquBX222T4NdcUj68zQCcwadu E33swuiuMvDtRmRyXNQuaekO22ZNqQTnJgtqp9KR13MbcWWp41lFcEWnfivv/D9QNtDf tXKjKVxWVPNaeMT5NcBWQDLCC0ezaTMdwIfq/s4v1zhupmBxQgxQUGOUqGx1YvtYMtTK Zh6g== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=slRu4llIpBSWhgHIyrDM2kuxRrCbnO1fLCccQyFWCiY=; fh=zu3dIfo2ozqnH8im2SqfdtD2xt7bZDrhyppL31GOlgE=; b=kMAdQRAhWAvCDGoEA3aaLQiHEkjkhVrVA8hAll4CQZHsFHt04b05mAC/5trg1LbhBy kkZxjYGF7clGuNW2V/6bSMy86Dj8p2jBuIYbE5WUvzYtSksy3c7vVjVXnn86qm/4IyIq NzZxPoZMpQsXePWtJiJyEtqckcc4hcQNMunUFzkWIac6AIFk9dYPcvchDOj8S3iOuGAM xRlMo24qIuTTaXGVgdH+ER5L67L8eZCkfFAfk5ec797v2ZvcLr9aLFCqJWwKUkvN1bf2 9+hch5Hds5hnKnx2yAmM+uucmFmmvw27dPh+PVhKnMj/lsEAz0Jj8WjRBEGAU11n+W3S HlFw==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=c9pIwojA; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1784113574; x=1784718374; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:references:in-reply-to:message-id:date:subject:cc:to :from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=slRu4llIpBSWhgHIyrDM2kuxRrCbnO1fLCccQyFWCiY=; b=Es5/r0gFqeLgZPsKT3qNIKXqvYTWyEJLecyM+L7C7OKc0tOC7jpLRcsD8/cvGM8G4a 2SFNWhept9e54Al1AIgjgIQR0eChOZZQIYJ59B4ZHBgc0NWeorftoyfLN4HRnhZB28Ry +1YZoBIKyN4+YXCm6pWsr9ZDlChZWU0HcFutNkD8j9HZZb9h9P7WaRGlMtslrhnUTTuo BrBMQIrgGJLy9/FI6qVRr4XroE9HG4TCUx71mFXIYqkSro39SwoHTgVrMQ9uZUBGm6wF 7KaXSKKthSXJMqDNLvFTO40g8krIRmK8U5xIpu9cdJlnBQprgdFjYlfx4G/8zPk9wIjL FHtQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1784113574; x=1784718374; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:references:in-reply-to:message-id:date:subject:cc:to :from:x-beenthere:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=slRu4llIpBSWhgHIyrDM2kuxRrCbnO1fLCccQyFWCiY=; b=kqbH40ErwBBlgQZ7OSmXtrlkBeKdB1ggJUWG835Cpn+4Uingw21v9CHiiTL8BWPa3S 5l5j6Mbvd9ZKS7EKLz0RzTMnvbb7ZmgbV/EDkL4hoc19dhmkA5sQajNnntPGCD40U75V Ei5WxWt+0IE4EJbtO2+BE0QHBQP5Htf0Idb+oAXi1XYQOZuw2DNsdZHFQd9YeLA1kYex XHgf3wnEULqFYoq2qSVDdpTQb3CHMtX+Eoqkk/wDSjRvB7rAMBelPjBYri8/sS4gX/Pi /v068znDeEXCPvqW5VIFpiXi8XSHehL+fNFIhaw/Q+/Ue3uMiiyJ+4LJ91YwzOXzbnrO 0OCQ== X-Forwarded-Encrypted: i=3; AHgh+Rrrf0CdrnTlHgma6it8BzPgcaZFGvj6lWBGPF6+4CV8AcuhkOKWvoor2prIvma8lDeO0RSD@ilbers.de X-Gm-Message-State: AOJu0Yx5q7MglEcYGg/o+WWDsdhCqhY8kOWMDYpvgpSOI9j9qEiXcUIu 1WdYbmiJkJ4CnCaasPYTZKNIH24r5/hY6ypvW6lOp5NcdYwT/ipE6fII X-Received: by 2002:a05:6820:210:b0:6a3:9945:8658 with SMTP id 006d021491bc7-6a39a8562camr10385024eaf.67.1784113574039; Wed, 15 Jul 2026 04:06:14 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="Aa7YSPSnTMXcJDmuK2CBduT1RPvXWqOwxN+W9Zel7y72GbJdww==" Received: by 2002:a05:6870:844f:b0:451:b6f0:d131 with SMTP id 586e51a60fabf-45628aa6f3cls458747fac.2.-pod-prod-07-us; Wed, 15 Jul 2026 04:06:13 -0700 (PDT) X-Received: by 2002:a05:6808:1b24:b0:4a0:cf55:3cf0 with SMTP id 5614622812f47-4a42ad05460mr11214347b6e.9.1784113573137; Wed, 15 Jul 2026 04:06:13 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1784113573; cv=pass; d=google.com; s=arc-20260327; b=QOmmvLAqFesBUQUBdLHlqmzBkBg+Zn0RyV0k+ZiXtFbYQa5w4BRsp3zTHrOcjQVPN8 OPaGIN/QGp6Gs10UkiVESuI8+XPZCDvqsO+AnacweQm+kZn8FQxOEef7v7WOMN1eV7Fa yn4j2DgTF68L7gBW7Yyg68IecOVYd9qU2zF6tigZov8h8p+95HgSi3ChNLacXfC20+lA /b4PWPfqk03s8DKm5RqkBMCZB9h/HzpX/KU2acOmXnhitdRNyEASr5G8rnkOhbTr5tny +3Ss3hpfljrxC8hejVz5D9jRsd2hCUgBmreEMcyi5XLoHbU2+mo2mUk9U6B0ugyHq0xw HwdQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:references:in-reply-to :message-id:date:subject:cc:to:from:dkim-signature; bh=E9CIYWFCfY8Lg9dy+yvbArQsEe54g11ZfE/jmggJiLI=; fh=WkhL8kaJc+l2wQon1t06Ej3uvBGj9sVhNcE8PaS/XbI=; b=EEZ5mOLYAUxOg/hhzyoyjnZadYDCoMNBOSkmc5gUGbuGSLR8UX5LxWRXzBjjZtIqLD MweVyOJL9TD4/Zir4ip2zVenh0Q8JXeHV5PGqVufikCZOjHPfC7wfgGkAu0WbE/mNgCx WZgFnwIRQbArXCh5WnwyyXplCuDV+2DUWBppOo/2nmfuM5AVOIGTmi3vbgIDNlgAuRO3 yA4cQbzfKKtOtbeg+dEjTxYP24TGWGi+D8R4IOAZfLNxVBLuDLEUwqpBEVpgWk5rUhI0 toNBHDCQTc3SlUWCIjqB/l7qG7N5zXVOOfKf8VCepZfZb/yvzYTeJd75IvVgfMM0wPaD 056A==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=c9pIwojA; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from MRWPR03CU001.outbound.protection.outlook.com (mail-francesouthazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c207::3]) by gmr-mx.google.com with ESMTPS id 5614622812f47-4a1acb73834si829433b6e.2.2026.07.15.04.06.12 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 15 Jul 2026 04:06:13 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) client-ip=2a01:111:f403:c207::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=JtF+0MAtRSnB7ma2h7AwXF+sxUDugYkoFodO6gsqLkXn6jY+KNPwB9J2pKB+wRDGokAeKWZ1/YsdSuMFknOJQENczYGGQyyVeGAWrZNGB8fU6YO0c/G0CJQGw+/ImGtjlJTWhEqzNbQ7LPPZMZlGL/uOyRXL69cmvNLIIF6vzqT8LqQCOCffRitG6hoMGGmauI/zYAFKqQMtnmMRfnNdoPvXEg0IwhWd0rnFezI4K6z5sqJlee0ZP1z/lHuMtjBZfwij0exxOligIwYZkhQcQygitvoECA6zX8EmX/6lRScXwELUZ96BcLFGqDnyZCdJDzKMrlLbaurxoTV9L87k5A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=E9CIYWFCfY8Lg9dy+yvbArQsEe54g11ZfE/jmggJiLI=; b=ZrLE+H2fOXWwbJoTRH/QZbu1jfsWsbges3WJRY0POcLwzDq4MipnKLnfqMGmJUs6JFU1skEhAAwC7Hhugv1BAQsls9/LqDcatKSj0d6YHahc60ILOYrmLPgK9zr/vnpsMm4zgoXKxlWofQ8GRcyPVliMho4euzV1OGKkPTBe4svXt1JkTMS6fqz6jmsCET/T7ZRoLeiARXQ/uSQeOmDELqDV87egDJLLaV+VPpjOhu00CT7pVE5GK7ZdA/wpNyWQtutTmZ2Pla1FBjg67lvdZk8a6Iz0Z3U7hQycLKOi53f3jbTvA5F9jhtPV6hYWiS9jxNlGqSqdMidZSfSkvwYSA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by PAWPR10MB7915.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:102:366::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.11; Wed, 15 Jul 2026 11:06:09 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%5]) with mapi id 15.21.0202.018; Wed, 15 Jul 2026 11:06:09 +0000 From: "'Felix Moessbauer' via isar-users" To: isar-users@googlegroups.com Cc: jan.kiszka@siemens.com, quirin.gylstorff@siemens.com, Felix Moessbauer Subject: [PATCH v8 14/17] use copy of sbom-chroot for sbom creation Date: Wed, 15 Jul 2026 13:05:45 +0200 Message-ID: <20260715110548.3605767-15-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.53.0 In-Reply-To: <20260715110548.3605767-1-felix.moessbauer@siemens.com> References: <20260715110548.3605767-1-felix.moessbauer@siemens.com> Content-Type: text/plain; charset="UTF-8" X-ClientProxiedBy: FR2P281CA0166.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:99::13) To AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM7PR10MB3956:EE_|PAWPR10MB7915:EE_ X-MS-Office365-Filtering-Correlation-Id: 557e028b-d1eb-44cf-b8f7-08dee261130b X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|366016|23010399003|1800799024|10070799003|376014|6133799003|56012099006|11063799006|10067099003|22082099003|55112099003|18002099003; X-Microsoft-Antispam-Message-Info: jn18nQdcMYSfb723E7bU9qF4fi/k6/s87NNJRh/1QGIUne+/WHv8FKVYMfg13LecgRuJXpjJCY/UJyskhEEmONGjaSRABq8TFvjaaQY1d5sTaaHT5KxG0WciwvboggBcDgEbLLsMbHfSulr77E7I7uQSJ5rkJF+3VURAQu5tc37E6Gk5Fjs9AIWjVHVnOQYkQWIAXcogBmbbf0furhUPOpog/vKAT+8y9+IG0PiEYzBO74nCVK7gEsPAgpz9EIDz3DSY2QmJqOdXr2vLSsHUfpuODNZxDtuLlVHUXUEa41iARgg0EyECYqeTrljIFpM1tux0ZiIY7sx9M3UUa20eUHH8E3Own0fmbwxPeC1/qEI682he+Z5gsfGdic1pQlGWHDTI1rMG/3V6HPPG4yNDewy+QBAtp5509dkdXLFGrGPiq5jvCmU2ZoZJrX5kZWEJS2lTgcBO0XqEkL9n80aEgtngJcVpUtG53EDPgB0D9pHI7ffwDvHZi6M0OAVV/uhk/4E1lwGO4n831P+Mn8ruF8tmNYUVG29SZFrQxUg2zwKYwCuB8J1UGJlX+fe0G194jOBCzxhS9Hf4lI2fYAecoFsWe1qbdMXlHNeULwRb61s= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(366016)(23010399003)(1800799024)(10070799003)(376014)(6133799003)(56012099006)(11063799006)(10067099003)(22082099003)(55112099003)(18002099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?DoutUkSrKvy2tid+nePUR16CGLQEwcFL0tLGWyuldRcb6WavPFd+XWFmjceO?= =?us-ascii?Q?40Ru+TYShHu6qx7q7nED2c07rSIQ6C2xpBNwBh/D/HZ2mpDFr6ZtX42hkiSO?= =?us-ascii?Q?mqSW8GVo0yPjuKE40quMA1N+FAFKpta/gC4ZRx6HScyFxAau8MkA7LomS2BW?= =?us-ascii?Q?u98U8crzVqxLSEt/GOFKnuP3uHwRbfVFhbZRFv/gXSB2n/vTLrk064RhZI5s?= =?us-ascii?Q?3vRME+jPVmTs2qvggRH2Y9OqVcwoQAXxofuBi5JL00VwUCPvMpoWOdDeS+Px?= =?us-ascii?Q?PLELm3znxfH7yg7xO8r94epx/kz45MWyP6qatRfDMQQgxawYJcM9Yi7GZhW4?= =?us-ascii?Q?lzLkvJoD4VYYot3Ah6jPyx6cq3CDtejrCcJkFPfVcUFx07ns7Vh1+UXxPfNC?= =?us-ascii?Q?zS4mUHOCDQMWexYZfCUq9mem9xttPpTn+aofYyny7w5YOH6bPcojp1aIamHC?= =?us-ascii?Q?LZimHEjJOdWbkYDzOrVIyXtsLGJs16ztAtrkLkmvefJtRb/fSEyg+y+0NJqa?= =?us-ascii?Q?gWmNCF6Wu7pG8Bv/++uVXI6IfWnNsXQTS6PdtB92IY6cNrMkbxlZj2xolWHh?= =?us-ascii?Q?EoQrcjuuQl7C94ORCgIzFH1ijtGTY3UVK8u+zpJPbhIf3hh6vrG1rvQorWOj?= =?us-ascii?Q?yshTCyOCE5tSLM6YRclkSWsOf43/IIe+jWInhQ2X8hg853oPSvLV7VnZKxHd?= =?us-ascii?Q?HT+GE/EbgYMU/3ween2MejK1zlzA5ctcB2rFHEEnZw3HqgBntOIAk60s4bAg?= =?us-ascii?Q?A/GjaRehSPJkOecEymt0+BSUvEKpM+Yqto2IAsHcTXZ3soAfs+I+wxTB/Ee5?= =?us-ascii?Q?oB2++ecu2p4sx3E+MkoglfRtYhjnRrp3AiwJc0jVgSIiksbq5hd8dqrpf5tg?= =?us-ascii?Q?aHrzYl6AehJV8nhSU/mnqMyDCn5h+otDlCm4Rz1uqwi/GKdEGbJiWxtQW8qB?= =?us-ascii?Q?ARbzmRhonaqysmKgVCQdz4kH3CiTfn/2tz117a3QnhKT132aERG60dCIi11X?= =?us-ascii?Q?p65uNxD/tXf5AOXvF/FLI+yU9T06mnJpl2ikZJyk28JugRQWdQrSCsdO5+UQ?= =?us-ascii?Q?Cwm1juyEi68vCHAS8H57Y1Os2bEd0ZLGT3j9js/A2IwNE5ARhDw+JTuuPsW5?= =?us-ascii?Q?zlTN74eEpOPN9TAVbC9xB9meTP+QiX+zAup9A7AFMLj64YSFPF5/EI8PqJhJ?= =?us-ascii?Q?aYlJl62wpZeefrtN1sdKHZpdDbnc7RwjAGda4T1NMSOMYEyfIqrlb1ke9bKX?= =?us-ascii?Q?8viSzp96UFhGrsD3taIdT5mu8cNdx/Ty/smgKgMSvb/EHQ3RmxbtBDPGWzOG?= =?us-ascii?Q?Y+AyEGKSiw8nqQ19nldFVnIM/Ds8PFlW9sQi2vMMOuUxzQiCQHcLeykA6crH?= =?us-ascii?Q?f63M8hqorvun5o2fO4Ayqv6LHsSxNoixntWz+g+koQLa2eBvwKnCcVpSmR8R?= =?us-ascii?Q?U1aj1tYiS8egR6yewwv+VSLRm04csTj7Exff3GsQR0G2pJ4wFKdURUmZHJ+O?= =?us-ascii?Q?LwQwtQsegO9JUCFjNXIqsiRwTIpmQXcl/dNY/bnoY11GNpbxzfpUPkXd2WM1?= =?us-ascii?Q?8/aimmmpCyca0OrYFrwvu1E/ME7xFKl++K400rF0Itf1/rXA1Ea6+0TGoSoE?= =?us-ascii?Q?mF+tNlisXs+E7QQDbnN8OUl4RaEqs9oa/vnDySmOxTBJWvJOiILlA2dZLmbg?= =?us-ascii?Q?/DFaZEYZ2psUpRwdqu+RREDFnfWnJHFIiu0d1ku9JmDWyijP8qgQa8CxRyeD?= =?us-ascii?Q?Mz+ArxrnDXCJNDE6za+EQUhFCXgmq9dnYiyOSO27cpQ+t48TDsMPBh0dEqTz?= X-MS-Exchange-AntiSpam-MessageData-1: UdzBXV7IYPSiuVs2GMaUSz77ALhweNT3UUk= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 557e028b-d1eb-44cf-b8f7-08dee261130b X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Jul 2026 11:06:09.3642 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: JWI/tLiZlSQMtclgCJbK411AFpYa9mynwYtO2WO8DyR3J4XklsJuUPOV0Zy+o0YGpFDRL5ZVlWBucIMHl0deQ7Lfygb2vzepXl4e4B8mhaM= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAWPR10MB7915 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=c9pIwojA; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: oTdKqkmWyVZ+ We previously used the same sbom-chroot for generating the sbom of different root filesystems. This required to have a live copy of the sbom-chroot in the deploy dir, on which also was operated on. Further, this copy was left behind in the deploy dir. We improve this by just storing a minimized tarball of the sbom-chroot in the deploy dir and extract that into the workdir of the rootfs. With the new logic in place, we also enable the sbom generation in unshare mode again. Signed-off-by: Felix Moessbauer --- .../image-tools-extension.bbclass | 27 +++++++++++++++--- meta/classes-recipe/imagetypes_wic.bbclass | 4 ++- meta/classes/sbom.bbclass | 28 ++++++++++++++++--- .../sbom-chroot/sbom-chroot.bb | 11 +++++++- 4 files changed, 60 insertions(+), 10 deletions(-) diff --git a/meta/classes-recipe/image-tools-extension.bbclass b/meta/classes-recipe/image-tools-extension.bbclass index cc046fdb..c75025ca 100644 --- a/meta/classes-recipe/image-tools-extension.bbclass +++ b/meta/classes-recipe/image-tools-extension.bbclass @@ -82,7 +82,7 @@ EOAPT dpkg-query -W -f='${source:Package}|${source:Version}|${Package}:${Architecture}|${Version}\n' ${local_bom} > \ ${WORKDIR}/imager.manifest - ${@bb.utils.contains('ROOTFS_FEATURES', 'generate-sbom', 'generate_imager_sbom', '', d)} + ${@bb.utils.contains('ROOTFS_FEATURES', 'generate-sbom', 'generate_imager_sbom $schroot_dir', '', d)} fi schroot -e -c ${session_id} @@ -91,14 +91,18 @@ EOAPT schroot_delete_configs } -generate_imager_sbom() { +generate_imager_sbom_in_chroot() { + run_privileged mkdir -p \ + ${SBOM_CHROOT_LOCAL}/mnt/rootfs \ + ${SBOM_CHROOT_LOCAL}/mnt/deploy-dir + TIMESTAMP=$(date --iso-8601=s -d @${SOURCE_DATE_EPOCH}) sbom_document_uuid="${@d.getVar('SBOM_DOCUMENT_UUID') or generate_document_uuid(d, False)}" bwrap \ --unshare-user \ --unshare-pid \ - --bind ${SBOM_CHROOT} / \ - --bind $schroot_dir /mnt/rootfs \ + --bind ${SBOM_CHROOT_LOCAL} / \ + --bind $1 /mnt/rootfs \ --bind ${WORKDIR} /mnt/deploy-dir \ -- debsbom -vv generate ${SBOM_DEBSBOM_TYPE_ARGS} \ --from-pkglist -r /mnt/rootfs -o /mnt/deploy-dir/imager \ @@ -128,6 +132,7 @@ imager_run_unshare() { fi local_install="${@(d.getVar("INSTALL_%s" % d.getVar("BB_CURRENTTASK")) or '').strip()}" + local_bom="${@(d.getVar("BOM_%s" % d.getVar("BB_CURRENTTASK")) or '').strip()}" run_privileged_heredoc <<'EOF' set -e @@ -185,5 +190,19 @@ EOF chroot ${ROOTFS_IMAGETOOLS} "$@" <&3 EOF + if [ -n "${local_bom}" ]; then + run_in_chroot ${ROOTFS_IMAGETOOLS} \ + dpkg-query -W -f='${source:Package}|${source:Version}|${Package}:${Architecture}|${Version}\n' ${local_bom} > \ + ${WORKDIR}/imager.manifest + + ${@bb.utils.contains('ROOTFS_FEATURES', 'generate-sbom', 'generate_imager_sbom {}'.format(d.getVar('ROOTFS_IMAGETOOLS')), '', d)} + fi + run_privileged rm -rf ${ROOTFS_IMAGETOOLS} } + +generate_imager_sbom() { + prepare_sbom_chroot + trap 'cleanup_sbom_chroot' EXIT + generate_imager_sbom_in_chroot "$1" +} diff --git a/meta/classes-recipe/imagetypes_wic.bbclass b/meta/classes-recipe/imagetypes_wic.bbclass index 3e261622..3c65ed0d 100644 --- a/meta/classes-recipe/imagetypes_wic.bbclass +++ b/meta/classes-recipe/imagetypes_wic.bbclass @@ -205,9 +205,11 @@ EOIMAGER | sort | uniq > "${DEPLOY_DIR_IMAGE}/${IMAGE_FULLNAME}.wic.manifest" if ${@bb.utils.contains('ROOTFS_FEATURES', 'generate-sbom', 'true', 'false', d)} ; then + prepare_sbom_chroot for bomtype in ${SBOM_TYPES}; do merge_wic_sbom $bomtype done + cleanup_sbom_chroot fi } @@ -227,7 +229,7 @@ merge_wic_sbom() { bwrap \ --unshare-user \ --unshare-pid \ - --bind ${SBOM_CHROOT} / \ + --bind ${SBOM_CHROOT_LOCAL} / \ -- debsbom -v merge -t $BOMTYPE \ --distro-name '${SBOM_DISTRO_NAME}-Image' --distro-supplier '${SBOM_DISTRO_SUPPLIER}' \ --distro-version '${SBOM_DISTRO_VERSION}' --base-distro-vendor '${SBOM_BASE_DISTRO_VENDOR}' \ diff --git a/meta/classes/sbom.bbclass b/meta/classes/sbom.bbclass index b4fcddaa..2e6d579f 100644 --- a/meta/classes/sbom.bbclass +++ b/meta/classes/sbom.bbclass @@ -23,7 +23,8 @@ SBOM_SPDX_NAMESPACE_PREFIX ?= "https://spdx.org/spdxdocs" DEPLOY_DIR_SBOM = "${DEPLOY_DIR_IMAGE}" SBOM_DIR = "${DEPLOY_DIR}/sbom" -SBOM_CHROOT = "${SBOM_DIR}/sbom-chroot" +SBOM_CHROOT = "${SBOM_DIR}/sbom-chroot.tar.zst" +SBOM_CHROOT_LOCAL = "${WORKDIR}/sbom-chroot" # adapted from the isar-cip-core image_uuid.bbclass def generate_document_uuid(d, warn_not_repr=True): @@ -40,14 +41,24 @@ def sbom_doc_uuid(d): if not d.getVar("SBOM_DOCUMENT_UUID"): d.setVar("SBOM_DOCUMENT_UUID", generate_document_uuid(d)) +prepare_sbom_chroot() { + run_privileged_heredoc <<'EOF' + set -e + mkdir -p ${SBOM_CHROOT_LOCAL} + tar -xf ${SBOM_CHROOT} -C ${SBOM_CHROOT_LOCAL} +EOF +} + generate_sbom() { - run_privileged mkdir -p ${SBOM_CHROOT}/mnt/rootfs ${SBOM_CHROOT}/mnt/deploy-dir + run_privileged mkdir -p \ + ${SBOM_CHROOT_LOCAL}/mnt/rootfs \ + ${SBOM_CHROOT_LOCAL}/mnt/deploy-dir TIMESTAMP=$(date --iso-8601=s -d @${SOURCE_DATE_EPOCH}) bwrap \ --unshare-user \ --unshare-pid \ - --bind ${SBOM_CHROOT} / \ + --bind ${SBOM_CHROOT_LOCAL} / \ --bind ${ROOTFSDIR} /mnt/rootfs \ --bind ${DEPLOY_DIR_SBOM} /mnt/deploy-dir \ -- debsbom -v generate ${SBOM_DEBSBOM_TYPE_ARGS} -r /mnt/rootfs -o /mnt/deploy-dir/'${ROOTFS_PACKAGE_SUFFIX}' \ @@ -59,8 +70,17 @@ generate_sbom() { --timestamp $TIMESTAMP ${SBOM_DEBSBOM_EXTRA_ARGS} } +cleanup_sbom_chroot() { + run_privileged rm -rf ${SBOM_CHROOT_LOCAL} +} + do_generate_sbom[dirs] += "${DEPLOY_DIR_SBOM}" +do_generate_sbom[network] = "${TASK_USE_SUDO}" python do_generate_sbom() { sbom_doc_uuid(d) - bb.build.exec_func("generate_sbom", d) + try: + bb.build.exec_func("prepare_sbom_chroot", d) + bb.build.exec_func("generate_sbom", d) + finally: + bb.build.exec_func("cleanup_sbom_chroot", d) } diff --git a/meta/recipes-devtools/sbom-chroot/sbom-chroot.bb b/meta/recipes-devtools/sbom-chroot/sbom-chroot.bb index 182432a0..f347327b 100644 --- a/meta/recipes-devtools/sbom-chroot/sbom-chroot.bb +++ b/meta/recipes-devtools/sbom-chroot/sbom-chroot.bb @@ -27,7 +27,16 @@ ROOTFSDIR = "${WORKDIR}/rootfs" ROOTFS_PACKAGES = "${SBOM_IMAGE_INSTALL}" do_sbomchroot_deploy[dirs] = "${SBOM_DIR}" +do_sbomchroot_deploy[network] = "${TASK_USE_SUDO}" do_sbomchroot_deploy() { - ln -Tfsr "${ROOTFSDIR}" "${SBOM_CHROOT}" + # deploy with empty var to make it smaller + lopts="--one-file-system --exclude=var/*" + ZSTD="zstd -${SSTATE_ZSTD_CLEVEL} -T${ZSTD_THREADS}" + + run_privileged \ + tar -C ${ROOTFSDIR} -cpS $lopts ${ROOTFS_TAR_ATTR_FLAGS} . \ + | $ZSTD > ${SBOM_CHROOT} + # cleanup extracted rootfs + run_privileged rm -rf ${ROOTFSDIR} } addtask do_sbomchroot_deploy before do_build after do_rootfs -- 2.53.0 -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/20260715110548.3605767-15-felix.moessbauer%40siemens.com.